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CHAPTER  1 


INTRODUCTION 


This  Validation  Summary  Report  describes  the  extent  to 
which  a  specific  Ada  compiler  conforms  to  the  Ada  Standard, 
ANSI/MIL-STD-1815A.  This  report  explains  all  technical  terms 
used  within  it  and  thoroughly  reports  the  results  of  testing  this 
compiler  using  the  Ada  Compiler  Validation  Capability  (ACVC) .  An 
Ada  compiler  must  be  implemented  according  to  the  Ada  Standard, 
and  any  implementation-dependent  features  must  conform  to  the 
requirements  of  the  Ada  Standard.  ^  The  Ada  Standard  must  be 
implemented  in  its  entirety,  and  nothing  can  be  implemented  that 
is  not  in  the  Standard. 

Even  though  all  validated  Ada  Compilers  conform  to  the  Ada 
Standard,  it  must  be  understood  that  some  differences  do  exist 
between  implementations.  The  Ada  Standard  permits  some 
implementation  dependencies — for  example,  the  maximum  length  of 
identifiers  or  the  maximum  values  of  integer  types.  Other 
differences  between  compilers  result  from  the  characteristics  of 
particular  operating  systems,  hardware,  or  implementation 
strategies.  All  the  dependencies  observed  during  the  process  of 
testing  this  compiler  are  given  in  this  report.^ 

The  information  in  this  report  is  derived  from  the  test  results 
produced  during  validation  testing.  The  validation  process 
includes  submitting  a  suite  of  standardized  tests,  the  ACVC,  as 
inputs  to  an  Ada  compiler  and  evaluating  the  results.  \  The 
purpose  of  validating  is  to  ensure  conformity  of  the  compiler  to 
the  Ada  Standard  by  testing  that  the  compiler  properly  implements 
legal  language  constructs  and  that  it  identifies  and  rejects 
illegal  language  constructs.  The  testing  also  identifies 
behaviour  that  is  implementation  dependent  but  permitted  by  the 
Ada  Standard.  Six  classes  of  tests  are  used.  These  tests  are 
designed  to  perform  checks  at  compile  time,  at  link  time,  and 
during  execution. 
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1.1  PURPOSE  OF  THIS  VALIDATION  SUMMARY  REPORT 

This  VSR  documents  the  results  of  the  validation  testing 
performed  on  an  Ada  compiler.  Testing  was  carried  out  for  the 
following  purposes :- 

.  To  attempt  to  identify  any  language  constructs 

supported  by  the  compiler  that  do  not  conform  to  the 
Ada  Standard 

.  To  attempt  to  identify  any  language  constructs  not 
supported  by  the  compiler  but  required  by  the  Ada 
Standard 

To  determine  that  the  implementation-dependent 
behaviour  is  allowed  by  the  Ada  Standard. 

Testing  of  this  compiler  was  conducted  by  NCC  under  the  direction 
of  the  AVF  according  to  procedures  established  by  the  Ada  Joint 
Program  Office  and  administered  by  the  Ada  Validation 
Organization  (AVO) .  On-site  testing  was  completed  2nd  June  1988 
at  GEC  Software  Limited,  132-135  Long  Acre,  London. 


1.2  USE  OF  THIS  VALIDATION  SUMMARY  REPORT 

Consistent  with  the  national  laws  of  the  originating  country,  the 
AVO  may  make  full  and  free  public  disclosure  of  this  report.  In 
the  United  States,  this  is  provided  in  accordance  with  the 
"Freedom  of  Information  Act"  (5  U.S.C.  #552) .  The  results  of 
this  validation  apply  only  to  the  computers,  operating  systems, 
and  compiler  versions  identified  in  this  report. 

The  organizations  represented  on  the  signature  page  of  this 
report  do  not  represent  or  warrant  that  all  statements  set  forth 
in  this  report  are  accurate  and  complete,  or  that  the  subject 
compiler  has  no  nonconformities  to  the  Ada  Standard  other  than 
those  presented.  Copies  of  this  report  are  available  to  the 
public  from: 

Ada  Information  Clearinghouse 
Ada  Joint  Program  Office 
OUSDRE 

The  Pentagon,  Rm  3D-139  (Fern  Street) 

Washington  DC  20301-3081 
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or  from:- 

The  National  Computing  Centre  Ltd 
Oxford  Road 
Manchester  Ml  7ED 
United  Kingdom 

Questions  regarding  this  report  or  the  validation  test  results 
should  be  directed  to  the  AVF  listed  above  or  to:- 

Ada  Validation  Organization 
Institute  for  Defense  Analyses 
1801  North  Beauregard  Street 
Alexandria  VA  22311 


1 . 3  REFERENCES 

1. -  Reference  Manual  for  the  Ada  Programming  Language,  ANSI/MIL- 

STD-1815A,  February  1983  and  ISO  8652-1987. 

2.  Ada  Compiler  Validation  Procedures  and  Guidelines,  Ada  Joint 
Program  Office,  1  January  1987. 

3.  Ada  Compiler  Validation  Capability  Implementers '  Guide, 
SofTech,  Inc.,  December  1986. 

4.  Ada  Compiler  Validation  Capability  User's  Guide,  December 
1986. 


1.4  DEFINITION  OF  TERMS 

ACVC  The  Ada  Compiler  Validation  Capability.  The  set 

of  Ada  programs  that  tests  the  conformity  of  an 
Ada  compiler  to  the  Ada  programming  language. 

Ada  An  Ada  Commentary  contains  all  information 

relevant  to  the  point  addressed  by  a  comment  on 
the  Ada  Standard.  These  comments  are  given  a 
unique  identification  number  having  the  form  AI- 
ddddd . 

Ada  Standard  ANSI/MIL-STD-1815A,  February  1983  and  ISO  8652- 
1987. 
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The  agency  requesting  validation. 

The  Ada  Validation  Facility.  The  AVF  is 

responsible  for  conducting  compiler  validations 
according  to  procedures  contained  in  the  Ada 

Validation  Procedures  and  Guidelines. 

The  Ada  Validation  Organization.  The  AVO  has 
oversight  authority  over  all  AVF  practices  for  the 
purpose  of  maintaining  a  uniform  process  for 
validation  of  Ada  compilers.  The  AVO  provides 
administrative  and  technical  support  for  Ada 
validations  to  ensure  consistent  practices. 

A  processor  for  the  Ada  language.  In  the  context 
of  this  report,  a  compiler  is  any  language 
processor,  including  cross-compilers,  translators, 
and  interpreters. 

An  ACVC  test  for  which  the  compiler  generates  a 
result  that  demonstrates  nonconformity  to  the  Ada 
Standard. 

The  computer  on  which  the  compiler  resides. 

An  ACVC  test  that  uses  features  of  the  language 
that  a  compiler  is  not  required  to  support  or  may 
legitimately  support  in  a  way  other  than  the  one 
expected  by  the  test. 

An  ACVC  test  for  which  a  compiler  generates  the 
expected  result. 

The  computer  for  which  a  compiler  generates  code. 

A  program  that  checks  a  compiler's  conformity 
regarding  a  particular  feature  or  a  combination  of 
features  to  the  Ada  Standard.  In  the  context  of 
this  report,  the  term  is  used  to  designate  a 
single  test,  which  may  comprise  one  or  more  files. 

An  ACVC  test  found  to  be  incorrect  and  not  used 
to  check  conformity  to  the  Ada  Standard.  A  test 
may  be  incorrect  because  it  has  an  invalid  test 
objective,  fails  to  meet  its  test  objective,  or 
contains  illegal  or  erroneous  use  of  the  language. 
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1.5  AC VC  TEST  CLASSES 

Conformity  to  the  Ada  Standard  is  measured  using  the  ACVC.  The 
AC VC  contains  both  legal  and  illegal  Ada  programs  structured  into 
six  test  classes:  A,  B,  C,  D,  E,  and  L.  The  first  letter  of  a 
test  name  identifies  the  class  to  which  it  belongs.  Class  A,  C, 
D,  and  E  tests  are  executable,  and  special  program  units  are  used 
to  report  their  results  during  execution.  Class  B  tests  are 
expected  to  produce  compilation  errors.  Class  L  tests  are 
expected  to  produce  compilation  or  link  errors. 

Class  A  tests  check  that  legal  Ada  programs  can  be  successfully 
compiled  and  executed.  There  are  no  explicit  program  components 
in  a  Class  A  test  to  check  semantics.  For  example,  a  Class  A 
test  checks  that  reserved  words  of  another  language  (other  than 
those  already  reserved  in  the  Ada  language)  are  not  treated  as 
reserved  words  by  an  Ada  compiler.  A  Class  A  test  is  passed  if 
no  errors  are  detected  at  compile  time  and  the  program  executes 
to  produce  a  PASSED  message. 

Class  B  tests  check  that  a  compiler  detects  illegal  language 
usage.  Class  B  tests  are  not  executable.  Each  test  in  this 
class  is  compiled  and  the  resulting  compilation  listing  is 
examined  to  verify  that  every  syntax  or  semantic  error  in  the 
test  is  detected.  A  Class  B  test  is  passed  if  every  illegal 
construct  that  it  contains  is  detected  by  the  compiler. 

Class  C  tests  check  that  legal  Ada  programs  can  be  correctly 
compiled  and  executed.  Each  Class  C  test  is  self-checking  and 
produces  a  PASSED,  FAILED,  or  NOT  APPLICABLE  message  indicating 
the  result  when  it  is  executed. 

Class  D  tests  check  the  compilation  and  execution  capacities  of  a 
compiler.  Since  there  are  no  capacity  requirements  placed  on  a 
compiler  by  the  Ada  Standard  for  some  parameters  -  for  example, 
the  number  of  identifiers  permitted  in  a  compilation  or  the 
number  of  units  in  a  library  -  a  compiler  may  refuse  to  compile  a 
Class  D  test  and  still  be  a  conforming  compiler.  Therefore,  if 
a  Class  D  test  fails  to  compile  because  the  capacity  of  the 
compiler  is  exceeded,  the  test  is  classified  as  inapplicable.  If 
a  Class  D  test  compiles  sucessfully,  it  is  self-checking  and 
produces  a  PASSED  or  FAILED  message  during  execution. 
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Each  Class  E  test  is  self-checking  and  produces  a  NOT  APPLICABLE 
PASSED,  or  FAILED  message  when  it  is  compiled  and  executed. 
However,  the  Ada  Standard  permits  an  implementation  to  reject 
programs  containing  some  features  addressed  by  Class  E  tests 
during  compilation.  Therefore,  a  Class  E  test  is  passed  by  a 
compiler  if  it  is  compiled  successfully  and  executes  to  produce  a 


PASSED  message,  or  if  it  is  rejected  by  the  compiler  for  an 
allowable  reason. 


Class  L  tests  check  that  incomplete  or  illegal  Ada  programs 
involving  multiple,  separately  compiled  units  are  detected  and 
not  allowed  to  execute.  Class  L  tests  are  compiled  separately 
and  execution  is  attempted.  A  Class  L  test  passes  if  it  is 
rejected  at  link  time — that  is,  an  attempt  to  execute  the  main 
program  must  generate  an  error  message  before  any  declarations  in 
the  main  program  or  any  units  referenced  by  the  main  program  are 
elaborated. 


Two  library  units,  the  package  REPORT  and  the  procedure 
CHECK_FILE,  support  are  self-checking  features  of  the  executable 
tests.  The  package  REPORT  provides  the  mechanism  by  which 
executable  tests  report  PASSED,  FAILED,  or  NOT  APPLICABLE 
results.  It  also  provides  a  set  of  identity  functions  used  to 
defeat  some  compiler  optimizations  allowed  by  the  Ada  Standard 
that  would  circumvent  a  test  objective.  The  procedure  CHECKFILE 
is  used  to  check  the  contents  of  text  files  written  by  some  of 
the  Class  C  tests  for  chapter  14  of  the  Ada  Standard.  The 
operation  of  REPORT  and  CHECK_FILE  is  checked  by  a  set  of 
executable  tests.  These  tests  produce  messages  that  are  examined 
to  verify  that  the  units  are  operating  correctly.  If  these  units 
are  not  operating  correctly,  then  the  validation  is  not 
attempted. 


The  text  of  the  tests  in  the  ACVC  follow  conventions  that  are 
intended  to  ensure  that  the  tests  are  reasonably  portable  without 
modification.  For  example,  the  tests  make  use  of  only  the  basic 
set  of  55  characters,  contain  lines  with  a  maximum  length  of  72 
characters,  use  small  numeric  values,  and  place  features  that  may 
not  be  supported  by  all  implementations  in  separate  tests. 
However,  some  tests  contain  values  that  require  the  test  to  be 
customized  according  to  implementation-specific  values — for 
example,  an  illegal  file  name.  A  list  of  the  values  used  for 
this  validation  is  provided  in  Appendix  C. 
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A  compiler  must  correctly  process  each  of  the  tests  in  the  suite 
and  demonstrate  conformity  to  the  Ada  Standard  by  either  meeting 
the  pass  criteria  given  for  the  test  or  by  showing  that  the  test 
is  inapplicable  to  the  implementation.  The  applicability  of  a 
test  to  an  implementation  is  considered  each  time  the 
implementation  is  validated. 

A  test  that  is  inapplicable  for  one  validation  is  not  necessarily 
inapplicable  for  a  subsequent  validation.  Any  test  that  was 
determined  to  contain  an  illegal  language  construct  or  an 
erroneous  language  construct  is  withdrawn  from  the  ACVC  and, 
therefore,  is  not  used  in  testing  a  compiler.  The  tests 
withdrawn  at  the  time  of  this  validation  are  given  in  Appendix  D. 
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CONFIGURATION  INFORMATION 
2 . 1  CONFIGURATION  TESTED 

The  candidate  compilation  system  for  this  validation  was  tested 
under  the  following  configuration: 

Compiler:  VADS,  Version  5.5 
A CVC  Version:  1.9 

Certificate  Number:  #880602N1 . 09079 
Host  Computer: 

Machine:  HP9000/350 

Operating  System:  HP-UX 

Version  6.01  B 

Memory  Size:  13. 8M  Bytes 


Target  Computer: 

Machine: 

Operating  System: 
Memory  Size: 


HP9000/350 

HP-UX 

Version  6.01  B 
13. 8M  Bytes  Actual 
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2.2  IMPLEMENTATION  CHARACTERISTICS 

One  of  the  purposes  of  validating  compilers  is  to  determine  the 
behaviour  of  a  compiler  in  those  areas  of  the  Ada  Standard  that 
permit  implementations  to  differ.  Class  D  and  E  tests 
specifically  check  for  such  implementation  differences. 
However,  tests  in  other  classes  also  characterize  an 
implementation.  The  tests  demonstrate  the  following 
characteristics : 

.  Capacities. 

The  compiler  correctly  processes  tests  containing  loop 
statements  nested  to  65  levels,  block  statements  nested  to 
65  levels,  and  recursive  procedures  separately  compiled  as 
subunits  nested  to  17  levels.  It  correctly  processes  a 
compilation  containing  723  variables  in  the  same  declarative 
part.  (See  tests  D55A03A..H  (8  tests),  D56001B,  D64005E. .G 

(3  tests),  and  D29002K.) 

.  Universal  integer  calculations. 

An  implementation  is  allowed  to  reject  universal  integer 
calculations  having  values  that  exceed  SYSTEM. MAXINT.  This 
implementation  processes  64  bit  integer  calculations.  (See 
tests  D4A002A,  D4A002B,  D4A004A,  and  D4A004B.) 

.  Predefined  types. 

This  implementation  supports  the  additional  predefined  types 
SHORT_INTEGER,  SHORT_FLOAT ,  and  TINY_INTEGER  in  the  package 
STANDARD.  (See  tests  B86001C  and  B86001D.) 

.  Based  literals. 

An  implementation  is  allowed  to  reject  a  based  literal  with 
a  value  exceeding  SYSTEM. MAX_INT  during  compilation,  or  it 
may  raise  NUMERI C_ERROR  or  CONSTRAINT_ERROR  during 
execution.  This  implementation  raises  NUMERI C_ERROR  during 
execution.  (See  test  E24101A.) 

.  Expression  evaluation. 

Apparently  no  default  initialization  expressions  for  record 
components  are  evaluated  before  any  value  is  checked  to 
belong  to  a  component's  subtype.  (See  test  C32117A.) 

Assignments  for  subtypes  are  performed  with  the  s  ime 
precision  as  the  base  type.  (See  test  C35712B.) 
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This  implementation  uses  no  extra  bits  for  extra  precision. 
This  implementation  uses  all  extra  bits  for  extra  range. 
(See  test  C35903A.) 

Sometimes  NUMERI C_ERROR  is  raised  when  an  integer  literal 
operand  in  a  comparison  or  membership  test  is  outside  the 
range  of  the  base  type.  (See  test  C45232A.) 

Apparently  NUMERIC_ERROR  is  raised  when  a  literal  operand  in 
a  fixed-point  comparison  or  membership  test  is  outside  the 
range  of  the  base  type.  (See  test  C45252A.) 

Apparently  underflow  is  gradual.  (See  tests  C45524A..Z.) 

Rounding. 

The  method  used  for  rounding  to  integer  is  apparently  round 
toward  zero.  (See  tests  C46012A..Z.) 

The  method  used  for  rounding  to  longest  integer  is 
apparently  round  toward  zero.  (See  tests  C46012A..Z.) 

The  method  used  for  rounding  to  integer  in  static  universal 
real  expressions  is  apparently  round  toward  zero.  (See  test 
C4A014A. ) 

Array  types. 

An  implementation  is  allowed  to  raise  NUMERICERROR  oi 
CONSTRAINT_ERROR  for  an  array  having  a  'LENGTH  that  exceeds 
STANDARD. INTEGER' LAST  and/or  SYSTEM. MAX_INT.  For  this 
implementation : 

Declaration  of  an  array  type  or  subtype  declaration  with 
more  than  SYSTEM. MAX_INT  components  raises  no  exception. 
(See  test  C36003A.) 

NUMERIC_ERROR  is  raised  when  'LENGTH  is  applied  to  an  array 
type  with  INTEGER' LAST+2  components.  (See  test  C36202A.) 

NUMERICERROR  is  raised  when  'LENGTH  is  applied  to  an  array 
type  with  SYSTEM .  MAX_INT  +  2  components.  (See  test 
C36202B.) 

A  packed  BOOLEAN  array  having  a  'LENGTH  exceeding 
INTEGER 'LAST  raises  NUMERIC_ERROR  when  the  array  type  is 
declared.  (See  test  C52103X.) 
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A  packed  two-dimensional  BOOLEAN  array  with  more  than 
INTEGER' LAST  components  raises  NUMERI C_ERROR  when  the  array 
type  is  declared.  (See  test  C52104Y.) 

A  null  array  with  one  dimension  of  length  greater  than 
INTEGER 'LAST  may  raise  NUMERIC_ERROR  or  CONSTRAINT_ERROR 
either  when  declared  or  assigned.  Alternatively,  an 
implementation  may  accept  the  declaration.  However,  lengths 
must  match  in  array  slice  assignments.  This  implementation 
raises  NUMERI C_ERROR  when  the  array  type  is  declared.  (See 
test  E52103Y.) 

In  assigning  one-dimensional  array  types,  the  expression 
appears  to  be  evaluated  in  its  entirety  before 
CONSTRAINT_ERROR  is  raised  when  checking  whether  the 
expression's  subtype  is  compatible  with  the  target's 
subtype.  In  assigning  two-  dimensional  array  types,  the 
expression  does  not  appear  to  be  evaluated  in  its  entirety 
before  CONSTRAINT_ERROR  is  raised  when  checking  whether  the 
expression's  subtype  is  compatible  with  the  target's 
subtype.  (See  test  C52013A.) 

Discriminated  types. 

During  compilation,  an  implementation  is  allowed  to  either 
accept  or  reject  an  incomplete  type  with  discriminants  that 
is  used  in  an  access  type  definition  with  a  compatible 
discriminant  constraint.  This  implementation  accepts  such 
subtype  indications.  (See  test  E38104A. ) 

In  assigning  record  types  with  discriminants,  the  expression 
appears  to  be  evaluated  in  its  entirety  before 
CONSTRAINT_ERROR  is  raised  when  checking  whether  the 
expression's  subtype  is  compatible  with  the  target's 
subtype.  (See  test  C52013A.) 

Aggregates . 

In  the  evaluation  of  a  multi-dimensional  aggregate,  all 
choices  appear  to  be  evaluated  before  checking  against  the 
index  type.  (See  tests  C43207A  and  C43207B.) 

In  the  evaluation  of  an  aggregate  containing  subaggregates, 
all  choices  are  evaluated  before  being  checked  for 
identical  bounds.  (See  test  E43212B.) 

All  choices  are  evaluated  before  CONSTRAINT_ERROR  is  raised 
if  a  bound  in  a  non-null  range  of  a  non-null  aggregate  does 
not  belong  to  an  index  subtype.  (See  test  E43211B.) 
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Representation  Clauses 


An  implementation  might  legitimately  place  restrictions  on 
representation  clauses  used  by  some  of  the  tests.  If  a 
representation  clause  is  used  by  a  test  in  a  way  that 
violates  a  restriction,  then  the  implementation  must  reject 
it. 

Enumeration  representation  clauses  containing  noncontiguous 
values  for  enumeration  types  other  than  character  and 
boolean  types  are  supported.  (See  tests  C35502I..J, 
C35502M..N,  andA39005F.) 

Enumeration  representation  clauses  containing  noncontiguous 
values  for  character  types  are  supported.  (See  tests 
C35507I . . J,  C35507M..N,  and  C55B16A.) 

Enumeration  representation  clauses  for  boolean  types 
containing  representational  values  other  than  (FALSE  =>  0, 
TRUE  =>  1)  are  supported.  (See  tests  C35508I..J  and 

C35508M. .N. ) 

Length  clauses  with  SIZE  specifications  for  enumeration 
types  are  supported.  (See  test  A39005B.) 

Length  clauses  with  STORAGE_SIZE  specifications  for  access 
types  are  supported.  (See  tests  A39005C  and  C87B62B.) 

Length  clauses  with  STORAGE_SIZE  specifications  for  task 
types  are  supported.  (See  tests  A39005D  and  C87B62D.) 

Length  clauses  with  SMALL  specifications  are  supported.  (See 
tests  A39005E  and  C87B62C.) 

Record  representation  clauses  are  supported.  (See  test 
A39005G. ) 

Length  clauses  with  SIZE  specifications  for  derived  integer 
types  are  supported.  (See  test  C87B62A.) 

Pragmas. 

The  pragma  INLINE  is  supported  for  procedures.  The  pragma 
INLINE  is  supported  for  functions.  (See  tests  LA3004A, 
LA3004B,  EA3004C,  EA3004D,  CA3004E,  and  CA3004F.) 
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Input/output. 

The  package  SEQUENTIAL_IO  can  be  instantiated  with 
unconstrained  array  types  and  record  types  with 
discriminants  without  defaults.  (See  tests  AE2101C, 
EE2201D,  and  EE2201E.) 

The  package  DIRECT_IO  can  be  instantiated  with 
unconstrained  array  types  and  record  types  with 
discriminants  without  defaults.  (See  tests  AE2101H, 
EE2401D,  and  EE2401G.) 

Modes  IN_FILE  and  OUT_FILE  are  supported  for  SEQUENTIAL_IO . 
(See  tests  CE2102D  and  CE2102E.) 

Modes  IN_FILE,  OUT_FILE,  and  INOUTJPILE  are  supported  for 
DIRECT_IO.  (See  tests  CE2102F,  CE2102I,  and  CE2102J.) 

RESET  and  DELETE  are  supported  for  SEQUENTIAL^IO  and 
DIRECT_IO .  (See  tests  CE2102G  and  CE2102K.) 

Dynamic  creation  and  deletion  of  files  are  supported  for 
SEQUENTIAL_IO  and  DIRECTIO.  (See  tests  CE2106A  and 
6E2106B. ) 

Overwriting  to  a  sequential  file  truncates  the  file  to  last 
element  written.  (See  test  CE2208B.) 

An  existing  text  file  can  be  opened  in  OUT  FILE  mode,  can  be 
created  in  OUT_FILE  mode,  and  can  be  created  in  IN  FILE 
mode.  (See  test  EE3102C.) 


More  than  one  internal  file  can  be  associated  with  each 
external  file  for  text  I/O  for  both  reading  and  writing  (See 
tests  CE3111A..E  (5  tests),  CE3114B,  and  CE3115A.) 


More  than 

one 

internal 

file 

can  be 

associated 

with 

each 

external 

file 

for  sequential 

I/O 

for  both  reading 

and 

writing. 

(See 

tests  CE2107A. 

•  D  (4 

tests) ,  CE2110B, 

and 

CE2111D. ) 

More  than 

one 

internal 

file 

can  be 

associated 

with 

each 

external  file  for  direct  I/O  for  both  reading  and  writing 
(See  tests  CE2107F..I  (4  tests),  CE2110B,  and  CE2111H.) 

An  internal  sequential  access  file  and  an  internal  direct 
access  file  can  be  associated  with  a  single  external  file 
for  writing.  (See  test  CE2107E.) 
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An  external  file  associated  with  more  than  one  internal  file 
can  be  deleted  for  SEQUENTIALJEO,  DIRECTJTO,  and  TEXT_IO. 
(See  test  CE2110B.) 

Temporary  sequential  files  are  given  names.  Temporary 
direct  files  are  given  names.  Temporary  files  given  names 
are  deleted  when  they  are  closed.  (See  tests  CE2108B  and 
CE2108C.) 

Generics. 

Generic  subprogram  declarations  and  bodies  can  be  compiled 
in  separate  compilations.  (See  tests  CA1012A  and  CA2009F.) 

Generic  package  declarations  and  bodies  can  be  compiled  in 
separate  compilations.  (See  tests  CA2009C,  BC3204C,  and 

BC3205D. ) 

Generic  unit  bodies  and  their  subunits  can  be  compiled  in 
separate  compilations.  (See  test  CA3011A.) 
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3 . 1  TEST  RESULTS 

Version  1.9  of  the  ACVC  comprises  3122  tests.  When  this  compiler 
was  tested,  27  tests  had  been  withdrawn  because  of  test  errors. 
The  AVF  determined  that  226  tests  were  inapplicable  to  this 
implementation.  All  inapplicable  tests  were  processed  during 
validation  testing  except  for  201  executable  tests  that  use 
floating-point  precision  exceeding  that  supported  by  the 
implementation.  Modifications  to  the  code,  processing,  or 
grading  for  26  tests  were  required  to  successfully  demonstrate 
the  test  objective.  (See  section  3.6.) 

The  AVF  concludes  that  the  testing  results  demonstrate 
acceptable  conformity  to  the  Ada  Standard. 


3.2  SUMMARY  OF  TEST  RESULTS  BY  CLASS 


RESULT 


TEST  CLASS  TOTAL 


A 

B 

C 

D 

E 

L 

Passed 

109 

1049 

1630 

17 

18 

46 

Inapplicable 

1 

2 

223 

0 

0 

0 

Withdrawn 

3 

2 

21 

0 

1 

0 

TOTAL 

113 

1053 

1874 

17 

19 

46 

Total 

2869 

226 


3: 
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3 . 3  SUMMARY  OF 

RESULT  CHAPTER 

TEST 

RESULTS 

BY 

CHAPTER 

TOTAL 

2 

3 

4 

5 

6 

7 

8  9 

10 

11 

12 

13 

14 

Passed 

190 

499 

540 

245 

166 

98 

142  '326 

137 

36 

234 

3 

253 

2869 

Inapplicable 

14 

73 

134 

3 

0 

0 

1  1 

0 

0 

0 

0 

0 

226 

Withdrawn 

2 

14 

3 

0 

0 

1 

2  0 

0 

0 

2 

1 

2 

27 

TOTAL 

206 

586 

677 

248 

166 

99 

145  327 

137 

36 

236 

4 

255 

3122 

3 . 4  WITHDRAWN  TESTS 

♦  The  following  27  tests  were  withdrawn  from  ACVC  Version  1.9  at 
the  time  of  this  validation: 

B28003A  C35904A  C37215C  C41402A  CC1311B 

C35904B  C45332A 

E28005C  C35A03E  C37215E  C45614C  BC3105A 

C34004A  C35A03R  C37215G  A74016C  AD1A01A 

C35502P  C37213H  C37215H  C85018B  CE2401H 

A35902C  C37213J  C38102C  C87B04B  CE3208A 

See  Appendix  D  for  the  reason  that  each  of  these  tests  was 
withdrawn. 


3 . 5  INAPPLICABLE  TESTS 

Some  tests  do  not  apply  to  all  compilers  because  they  make  use  of 
features  that  a  compiler  is  not  required  by  the  Ada  Standard  to 
support.  Others  may  depend  on  the  result  of  another  test  that  is 
either  inapplicable  or  withdrawn.  The  applicability  of  a  test 
to  an  implementation  is  considered  each  time  a  validation  is 
attempted.  A  test  that  is  inapplicable  for  one  validation 
attempt  is  not  necessarily  inapplicable  for  a  subsequent  attempt. 
For  this  validation  attempt,  226  tests  were  inapplicable  for  the 
reasons  indicated: 

.  C35702B  uses  LONG_FLOAT  which  is  not  su^p^i-Led  by  this 

implementation . 
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A39005G  uses  an  array  within  a  record,  for  which  a  record 
representation  clause  has  been  stated  in  the  declaration 
which  this  compiler  does  not  implicitly  pack. 

The  following  tests  use  LONG_INTEGER,  which  is  not  supported 
by  this  compiler: 

C45231C  C45304C  C45502C  C45503C  C45504C 
C45504F  C45611C  C45613C  C45631C 
C45632C  B52004D  C55B07A  B55B0SC 

C45531M,  C45531N,  C45532M,  and  C45532N  use  fine  48-bit 
fixed-point  base  types  which  are  not  supported  by  this 
compiler. 

C455310,  C45531P,  C455320,  and  C45532P  use  coarse  48-bit 
fixed-point  base  types  which  are  not  supported  by  this, 
compiler. 

C86001F  redefines  package  SYSTEM,  but  TEXTIO  is  made 
obsolete  by  this  new  definition  in  this  implementation  and 
the  test  cannot  be  executed  since  the  package  REPORT  is 
4ependent  on  the  package  TEXT_IO. 

C96005B  requires  the  range  of  type  DURATION  to  be  different 
from  those  of  its  base  type;  in  this  implementation  they  are 
the  same. 

The  following  201  tests  require  a  floating-point  accuracy 
that  exceeds  the  maximum  of  15  digits  supported  by  this 
implementation : 


C24113L. .Y 

(14 

tests) 

C35705L.  .  Y 

(14 

tests) 

C35706L. . Y 

(14 

tests) 

C35707L. .Y 

(14 

tests) 

C35708L. .Y 

(14 

tests) 

C35802L. .Z 

(15 

tests) 

C45241L. .Y 

(14 

tests) 

C45321L. .Y 

(14 

tests) 

C45421L. . Y 

(14 

tests) 

C45521L. .Z 

(15 

tests) 

C45524L. .Z 

(15 

tests) 

C45621L. .Z 

(15 

tests) 

C45641L. . Y 

(14 

tests) 

C46012L. .Z 

(15 

tests) 
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3.6  TEST,  PROCESSING,  AND  EVALUATION  MODIFICATIONS 


It  is  expected  that  some  tests  will  require  modifications  of 
code,  processing,  or  evaluation  in  order  to  compensate  for 
legitimate  implementation  behaviour.  Modifications  are  made  by 
the  AVF  in  cases  where  legitimate  implementation  behaviour 
prevents  the  successful  completion  of  an  (otherwise)  applicable 
test.  Examples  of  such  modifications  include:  adding  a  length 
clause  to  alter  the  default  size  of  a  collection;  splitting  a 
Class  B  test  into  subtests  so  that  all  errors  are  detected;  and 
confirming  that  messages  produced  by  an  executable  test 
demonstrate  conforming  behaviour  that  wasn't  anticipated  by  the 
test  (such  as  raising  one  exception  instead  of  another) . 

Modifications  were  required  for  26  Class  B  tests. 


The  following  Class  B  tests  were  split  because  syntax  errors  at 
one  point  resulted  in  the  compiler  not  detecting  other  errors  in 
the  test: 


B24009A 

B2A003B 

B38003B 

B64001A 

B91001H 

BC3005B 


B24204A 

B2A003C 

B38009A 

B67001A 

B91003B 


B24204B 

B33301A 

B38009B 

B67001B 

B95001A 


B24204C 

B37201A 

B41202A 

B67001C 

B97102A 


B2A003A 

B38003A 

B44001A 

B67001D 

BC1303F 


3.7  ADDITIONAL  TESTING  INFORMATION 
3.7.1  Prevalidation 

Prior  to  validation,  a  set  of  test  results  for  ACVC  Version  1.9 
produced  by  the  VADS  was  submitted  to  the  AVF  by  the  applicant 
for  review.  Analysis  of  these  results  demonstrated  that  the 
compiler  successfully  passed  all  applicable  tests,  and  the 
compiler  exhibited  the  expected  behaviour  on  all  inapplicable 
tests. 


3.7.2  Test  Method 

Testing  of  the  VADS  using  ACVC  Version  1.9  was  conducted  on-site 
by  a  validation  team  from  the  AVF.  The  configuration  consisted 
of  a  HP9000/350  operating  under  HP-UX,  Version  6.01  B. 
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A  Magnetic  Tape  containing  all  tests  was  taken  on-site  by  the  j 

validation  team  for  processing.  Tests  that  make  use  of  i 

implementation-specific  values  were  customized  before  being 
written  to  the  Magnetic  Tape.  Tests  requiring  modifications 
during  the  pre-validation  testing  were  not  included  in  their 
modified  form  on  the  Magnetic  Tape. 

The  contents  of  the  Magnetic  Tape  were  not  loaded  directly  onto 
the  host  computer. 

The  contents  of  the  magnetic  tape  were  loaded  onto  a  VAX  VMS 
11/780  and  then  transferred  via  Ethernet  onto  the  host  computer. 

After  the  test  files  were  loaded  to  disk,  the  full  set  of  tests 
was  compiled  and  linked  on  the  HP9000/350,  and  all  executable 
tests  were  run  on  the  HP9000/350.  Results  were  printed  from  the 
host  computer. 

The  compiler  was  tested  using  command  scripts  provided  by  GEC 
Software  Limited  and  reviewed  by  the  validation  team.  The 
compiler  was  tested  using  all  default  option  settings  except  for 
the  following: 

Option  Effect 

-el  Errors  Interspersed  into  Source  Code 

Tests  were  compiled,  linked,  and  executed  (as  appropriate)  using 
a  single  host  computer.  Test  output,  compilation  listings,  and 
job  logs  were  captured  on  Magnetic  Tape  and  archived  at  the  AVF. 

The  listings  examined  on-site  by  the  validation  team  were  also 
archived. 


3.7.3  Test  Site 

Testing  was  conducted  at  GEC  Software  Limited,  132-135  Long  Acre, 
London  and  was  completed  on  2nd  June  1988. 
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DECLARATION  OF  CONFORMANCE 


GEC  Software  Limited  has  submitted  the  following 
Declaration  of  Conformance  concerning  the  VADS. 
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DECLARATION  OF  CONFORMANCE 


Compiler  Implementor:  GEC  Software  Limited 

Ada*  Validation  Facility:  The  National  Computing  Centre  Limited 
Ada  Compiler  Validation  Capability  (ACVC)  Version:  1.9 


Base  Configuration 


Base  Compiler  Name:  VADS  Version:  Version  5.5 

Host  Architecture  ISA:  HP9000/350  OS&VER  #: HP-UX, Version  6.01  B 

Target  Architecture  ISA:  HP9000/350  OS&VER  #: HP-UX, Version  6.01  B 


Implementor’s  Declaration 


I,  the  undersigned,  representing  GEC  Software  Limited,  have  implemented 
no  deliberate  extensions  to  the  Ada  Language  Standard 
AN3I/MIL-STD-1315A  in  the  compiier(s)  listed  in  this  declaration.  I 
declare  that  The  Verdix  Corporation  is  the  owner  of  record  of  the  Ada 
language  compiler (s)  listed  above  and,  as  such,  is  responsible  for 
maintaining  said  compiler(s)  in  conformance  to  ANSI/MIL-STD-1815A.  GEC 
Software  Limited  has  carried  out  the  port  of  the  Verdix  Vads  product 
under  subcontract  to  Verdix  and  with  Verdix'  full  licence  authority. 
GEC  Software  are  the  Ada  Technology  Centre  for  Verdix  in  Europe.  All 
certificates  and  registrations  for  Ada  language  compiler(s)  listed  in 
this  declaration  shall  be  made  only  in  the  owner's  corporate  name. 


GEC  Software  Limited 

ANNE  EVETTS,  Commercial  Manager 


*Ada  is  a  registered  trademark  of  the  United  States  Government  (Ada 
Joint  Program  Office) . 
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Owner's  Declaration 


I,  the  undersigned,  representing  GEC  Software  Limited,  take  full 
responsibility  for  the  implementation  and  maintenance  of  the  Ada 
compiler (s)  listed  above  under  the  terms  of  the  subcontract  from 
Verdix  Corporation  and  agree  to  the  public  disclosure  of  the 
final  Validation  Summary  Report.  I  further  agree  to  continue  to 
comply  with  the  Ada  trademark  policy,  as  defined  by  the  Ada  Joint 
Program  Office.  I  declare  that  all  of  the  Ada  language  compilers 
listed,  and  their  host/target  performance,  are  in  compliance  with 
the  Ada  Language  Standard  ANSI/MIL-STD-1815A. 


_ \-y  ■  -  ^  ^ -  * _  Date;  ^  \ 

GEC  Software  Limited 

ANNE  EVETTS,  Commercial  Manager 
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APPENDIX  F  OF  THE  Ada  STANDARD 


The  only  allowed  implementation  dependencies  correspond  to 
implementation-dependent  pragmas,  to  certain  machine-dependent 
conventions  as  mentioned  in  chapter  13  of  the  Ada  Standard,  and 
to  certain  allowed  restrictions  on  representation  clauses.  The 
implementation-dependent  characteristics  of  the  VADS,  Version 
5.5,  are  described  in  the  following  sections,  which  discuss 
topics  in  Appendix  F  of  the  Ada  Standard. 
Implementation-specific  portions  of  the  package  STANDARD  are  also 
included  in  this  appendix. 
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APPENDIX  F.  Implementation-Dependent  Characteristics 


1.  Implementation -Dependent  Pragmas 
1.1.  INLINEONLY  Pragma 

The  INLINE  ONLY  pragma,  when  used  in  the  same  way  as  pragma  INLINE,  indicates  to  the  compiler 
that  the  subprogram  must  always  be  inlined.  This  pragma  also  suppresses  the  generation  of  a  callable 
version  of  the  routine  which  save  code  space. 

1-2.  BUILTIN  Pragma 

The  BUILT  IN  pragma  is  used  in  the  implementation  of  some  predefined  Ada  packages,  but  provides 
no  user  access.  It  is  used  only  to  implement  code  bodies  for  which  no  actual  Ada  body  can  be  pro¬ 
vided,  for  example  the  MACHINE  CODE  package. 

1J.  SHARE  CODE  Pragma 

The  SHARECODE  pragma  takes  the  name  of  a  generic  instantiation  or  a  generic  unit  as  the  first  argu¬ 
ment  and  one  of  the  identifiers  TRUE  or  FALSE  as  the  second  argument.  This  pragma  is  only  allowed 
immediately  at  the  place  of  a  declarative  item  in  a  declarative  part  or  package  specification,  or  after  a 
library  unit  in  a  compilation,  but  before  any  subsequent  compilation  unit. 

When  the  first  argument  is  a  generic  unit  the  pragma  applies  to  all  instantiations  of  that  generic.  When 
the  first  argument  is  the  name  of  a  generic  instantiation  the  pragma  applies  only  to  the  specified  instan¬ 
tiation,  or  overloaded  instantiations. 

If  the  second  argument  is  TRUE  the  compiler  will  try  to  share  code  generated  for  a  generic  instantia¬ 
tion  with  code  generated  for  other  instantiations  of  die  same  generic.  When  the  second  argument  is 
FALSE  each  instantiation  will  get  a  unique  copy  of  the  generated  code.  The  extent  to  which  code  is 
shared  between  instantiations  depends  on  this  pragma  and  the  kind  of  generic  formal  parameters 
declared  for  the  generic  unit 

The  name  pragma  SHARE  BODY  is  also  recognized  by  the  implementation  and  has  the  same  effect  as 
SHARE  CODE.  It  is  included  for  compatibility  with  earlier  versions  of  VADS. 

1.4.  NO_IMAGE  Pragma 

The  pragma  suppresses  the  generation  of  the  image  array  used  for  the  IMAGE  attribute  of  enumeration 
types.  This  eliminates  the  overhead  required  to  store  the  array  in  the  executable  image. 

13.  EXTERNAL  NAME  Pragma 

The  EXTERNAL  NAME  pragma  takes  the  name  of  a  subprogram  or  variable  defined  in  Ada  and 
allows  the  user  to  specify  a  different  external  name  that  may  be  used  to  reference  the  entity  from  other 
languages.  The  pragma  is  allowed  at  the  place  of  a  declarative  item  in  a  package  specification  and 
must  apply  to  an  object  declared  earlier  in  die  same  package  specification. 

1.6.  INTERFACE_OBJECT  Pragma 

The  INTERFACE  OBJECT  pragma  takes  the  name  of  a  a  variable  defined  in  another  language  and 
allows  it  to  be  referenced  directly  in  Ada.  The  pragma  will  replace  all  occurrences  of  the  variable 
name  with  an  external  reference  to  the  second,  link  argument.  The  pragma  is  allowed  at  the  place  of  a 
declarative  item  in  a  package  specification  and  must  apply  to  an  object  declared  earlier  in  the  same 
package  specification.  The  object  must  be  declared  as  a  scalar  or  an  access  type.  The  object  cannot  be 


‘r&rftOv’' 


v-' 


any  of  the  following: 

a  loop  variable, 
a  constant, 

an  initialized  variable, 
array,  or 
a  record. 

1.7.  IMPUCIT  JTODE  Pragma 

Takes  one  of  the  identifiers  ON  or  OFF  as  the  single  argument.  This  pragma  is  only  allowed  within  a 
machine  code  procedure.  It  specifies  that  implicit  code  generated  by  the  compiler  be  allowed  or  disal¬ 
lowed.  A  warning  is  issued  if  OFF  is  used  and  any  implicit  code  needs  to  be  generated.  The  default  is 
ON. 

2.  Implementation  of  Predefined  Pragmas 
2.1.  CONTROLLED 

This  pragma  is  recognized  by  the  implementation  but  has  no  effect. 

12.  ELABORATE 

Thi£  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  RM. 

23.  INLINE 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  RM. 

2.4.  INTERFACE 

This  pragma  supports  calls  to  'C'  and  FORTRAN  functions.  The  Ada  subprograms  can  be  either  func¬ 
tions  or  procedures.  The  types  of  parameters  and  the  result  type  for  functions  must  be  scalar,  access  or 
the  predefined  type  ADDRESS  in  SYSTEM.  An  optional  third  argument  overrides  the  default  link 
name.  All  parameters  must  have  mode  IN.  Record  and  array  objects  can  be  passed  by  reference  using 
the  ADDRESS  attribute. 

IS.  LIST 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  RM. 

2.6.  MEMORY_SIZE 

This  pragma  is  recognized  by  the  implementation.  The  implementation  does  not  allow  SYSTEM  to  be 
modified  by  means  of  pragmas,  the  SYSTEM  package  must  be  recompiled 

2.7.  OPTIMIZE 

This  pragma  is  recognized  by  the  implementation  but  has  no  effect 

IS.  PACK 

This  pragma  will  cause  the  compiler  to  choose  a  non-aligned  representation  for  composite  types.  It  will 
not  causes  objects  to  be  packed  at  the  bit  level. 

2.9.  PAGE 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  RM. 

2.10.  PRIORITY 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  RM. 


2.11.  SHARED 

This  pragma  is  recognized  by  the  implementation  but  has  no  effect. 

2.12.  ST ORAG  E_UNTT 

This  pragma  is  recognized  by  the  implementation.  The  implementation  does  not  allow  SYSTEM  to  be 
modified  by  means  of  pragmas,  the  SYSTEM  package  must  be  recompiled. 

2.13.  SUPPRESS 

This  pragma  is  implemented  as  described,  except  that  RANGE_CHECK  and  DIVISION_CHECK  can¬ 
not  be  supressed. 

2.14.  SYSTEM  NAME 

This  pragma  is  recognized  by  the  implementation.  The  implementation  does  not  allow  SYSTEM  to  be 
modified  by  means  of  pragmas,  the  SYSTEM  package  must  be  recompiled. 

3.  Implementation-Dependent  Attributes 
3.1.  P’REF 

For  a  prefix  that  denotes  an  object,  a  program  unit,  a  label,  or  an  entry: 

This  attribute  denotes  the  effective  address  of  the  first  of  the  storage  units  allocated  to  P.  For  a  subpro¬ 
gram,  package,  task  unit,  or  label,  it  refers  to  the  address  of  the  machine  code  associated  with  the 
corresponding  body  or  statement.  For  an  entry  for  which  an  address  clause  has  been  given,  it  refers  to 
the  corresponding  hardware  interrupt  The  attribute  is  of  the  type  OPERAND  defined  in  the  package 
MACHINE  CODE.  The  attribute  is  only  allowed  within  a  machine  code  procedure. 

See  section  F.4.8  for  more  information  on  the  use  of  this  attribute. 

(For  a  package,  task  unit  or  entry,  the  ’REF  attribute  is  not  supported.) 


4.  Specification  Of  Package  SYSTEM 


ritkl|<  SYSTEM 

•  •  >.<3 

« TP»  N*C  It  (  (til  ); 

_  "  tip 

STSUM  KAC  :  coaitaat  MA£  : -  »v*_aal«; 

noux  UNIT  :  taaitaat  :•  t; 

mCRYjlZB  :  cnilllt  :•  U_777_JU; 

••  Bji  t«Dtp«iOit  Nok4  NaaRcrs 

lflN_IKT  :  coat  t tat 

MUC  INT  :  coaitaat 

MkX  DIGITS  :  cun. tail 

MOC  MANTISSA  :  coaitaat  :•  31; 

F IKE  DELTA  :  coaatast 

TICK"  :  coaitaat 

•  -  Other  Syi i  ca- 4cpc a4c at  Dtclaratloac 

oak  type  mi  OR  ITT  la  INTEGER  raa|C  0  ..99; 

MAXRECS1ZE  :  lattgtr  :•  94*1024; 

typa  ADDRESS  la  ftlvati; 

fC  AO*  :  coaitaat  iCCRESS; 

40  faactloa  PHYSICAL  AEOLUS  (I  INTEGER)  ratara  ACERESS; 
faactloa  ACER  OT (A.  B  ADDRESS)  ratara  BOOLEAN , 
faactloa  ACER  LT(A,  B:  ADDRESS)  ratara  BOOLEAN; 
faactloa  ACER  <E(A.  B:  ADDRESS)  ratara  BOOLEAN; 
faactloa  ACER  L£( A,  B  ADDRESS)  ratara  BOOLEAN; 
faactloo  ACER  DIFF( A.  B  ADDRESS)  ratara  INTEGER; 
faactloa  (NCR  ADCR(A:  ADDRESS;  (NCR;  INTEGER)  ratara  ACERESS ; 
faactloa  DCDR_AEXR(A:  ADDRESS;  DECR:  INTEGER)  ratara  ACERESS; 

faactloa  a>"(A,  B:  ADDRESS)  ratara  BOOLEAN  raaawi  AEDR  OT; 

faactloa  “<-(A.  B:  ADDRESS)  tataia  BOOLEAN  raaaati  ACER  LT; 

faactloa  “>-’(A,  B:  ACERESS)  ratara  BOOLEAN  raiiari  ACER  GE; 

faactloa  a<-a(A,  »  ADDRESS)  ratara  BOOLEAN  raiiari  ACER  LE; 

faactloa  aa(A,  B:  ADDRESS)  ratara  INTEGER  reawi  ACER  D1FF; 

faactloa  aoa(A:  ACCRESS,  INCH  INTEGER)  ratara  ADDRESS  riauKi  INCRAEDR; 

faactioa  '-a(A:  ADDRESS;  DECK  INTEGER)  ratara  ADDRESS  raacaei  DECR  ACCR; 

pragma  ial  iue  (ADCR  CJT) ; 
fra  fn»  ial  I  a  a  ( ADCR  LT  )  ; 
pragma  ial  iat(ACCR_<E) ; 
pragma  ial  laa(  ADDRJLE) ; 
pragma  Ial  loe(ADCR_DIFF) ; 
pragma  Ial  iae  ( I  NCR  ACER) ; 
pragma  tal laa (DECR  ADCR) ; 
pragaa  ial  la»(  WYSlCAL_ADDRESS) ; 

pr  I va  ta 

lypa  ADDRESS  It  saw  liliftr; 

MD  ADCR  :  coaitaat  AECRKSS  0; 
as4  SYSTEM. 


5.  Restrictions  On  Representation  Clauses 


5.1.  Pragma  PACK 

Amy  components  less  than  STORAGE_UNTT  bits  are  packed  to  the  next  highest  power  of  2  bits. 
Objects  and  larger  '-omponents  are  packed  to  the  nearest  whole  STORAGE  UNIT.  In  the  absence  of 
pragma  PACK  record  components  are  padded  so  as  to  provide  for  efficient  access  by  the  target 
hardware,  pragma  PACK  applied  to  a  record  eliminated  the  padding  where  possible.  Pragma  PACK  has 
no  other  effect  on  the  storage  allocate  for  record  components  a  record  representation  is  required. 


5.2.  Record  Representation  Clauses 

For  scalar  types  a  represenation  clause  will  pack  to  the  number  of  bits  required  to  represent  the  range  of 
the  subtype.  A  record  representation  applied  to  a  composite  type  will  not  cause  the  object  to  be  packed 
to  St  in  the  space  required.  An  explicit  representation  clause  must  be  given  for  the  component  type.  An 


-1  147  413  44s ; 
1  147  413  447; 
11; 

J .#*•(-11); 
0.01; 


error  will  be  issued  if  there  is  unsufficient  space  allocated. 

5J.  Address  Clauses 

Address  clauses  are  supported  for  variables  and  constants. 

5.4.  Interrupts 

Interupt  entries  are  not  supported. 

5.5.  Representation  Attributes 

The  ADDRESS  attribute  is  not  supported  for  the  following  entities: 

Packages 

Tasks 

Labels 

Entries 

5.6.  Machine  Code  Insertions 
Machine  code  insertions  are  supported. 

♦ 

The  general  definition  of  the  package  MACHINECODE  provides  an  assembly  language  interface  for 
the  target  machine.  It  provides  the  necessary  record  type(s)  needed  in  the  code  statement,  an  enumera¬ 
tion  type  of  all  the  opcode  mneumonics,  a  set  of  register  definitions,  and  a  set  of  addressing  mode  func¬ 
tions. 

The  general  syntax  of  a  machine  code  statement  is  as  follows: 

CODE_n’(  opcode,  operand  {,  operand]  ); 
where  n  indicates  the  number  of  operands  in  the  aggregate. 

A  special  case  arises  for  a  variable  number  of  operands.  The  operands  are  listed  within  a  subaggregate. 
The  format  is  as  follows: 

CODE_N’(  opcode,  ( operand  {,  operand }) ); 

For  those  opcodes  that  require  no  operands,  named  notation  must  be  used  (cf.  RM  4.3(4)). 

CODE_0’(  op  ->  opcode  ); 

The  opcode  must  be  an  enumeration  literal  (i.e.  it  cannot  be  an  object,  attribute,  or  a  rename). 

An  operand  can  only  be  an  entity  defined  in  MACH INE  CODE  or  the  ’REF  attribute. 

The  arguments  to  any  of  the  functions  defined  in  MACHINE  CODE  must  be  static  expressions,  string 
literals,  or  the  functions  defined  in  MACHINE_CODE.  The  'REF  attribute  may  not  be  used  as  an  argu¬ 
ment  in  any  of  these  functions. 

Inline  expansion  of  machine  code  procedures  is  supported. 


i.  Conventions  for  Implementation-generated  Names 
There  are  no  implementation-generated  names. 


7.  Interpretation  of  Expressions  in  Address  Clauses 
Address  clauses  are  supported  for  constants  and  variables. 

®--  Restrictions  on  Unchecked  Conversions 
None. 

9.  Restrictions  on  Unchecked  Deallocations 
None. 


10.  Implementation  Characteristics  of  I/O  Packages 

Instantiations  of  DIRECT  JO  use  the  value  MAXRECSIZE  as  the  record  size  (expressed  in 
STORAG E_UN ITS )  when  the  size  of  ELEMENT_TYPE  exceeds  that  value.  For  example  for  ancon- 
strained  arrays  such  as  string  where  ELEMENT  TYPE’SIZE  is  very  large.  MAX  REC  SIZE  is  used 
instead.  MAX  RECORD  SIZE  is  defined  in  SYSTEM  and  can  be  changed  by  a  program  before 
instantiating  DIRECT  10  to  provide  an  upper  limit  on  the  record  size.  In  any  case  the  maximum  size 
supported  is  1024  x  1024  x  STORAGE JJNIT  bits.  DIRECT  10  will  raise  USE  ERROR  if 
MAX  REC  SIZE  exceeds  this  absolute  limit 

Instantiations  of  SEQUENTIAL  JO  use  the  value  MAXRECSIZE  as  the  record  size  (expressed  in 
STORAGE  JJN ITS)  when  the  size  of  ELEMENT_TYPE  exceeds  that  value.  For  example  for  uncon¬ 
strained  arrays  such  as  string  where  ELEMENT_TYPE ‘ SIZE  is  very  large,  MAX  REC  SIZE  is  used 
instead.  MAX_RECORD_SIZE  is  defined  in  SYSTEM  and  can  be  changed  by  a  program  before 
instantiating  INTEGER  JO  to  provide  an  upper  limit  on  the  record  size.  SEQUENTIAL  IO  imposes  no 
limit  on  MAX  REC  SIZE.  “ 


11.  Implementation  Limits 

The  following  limits  are  actually  enforced  by  the  implementation.  It  is  not  intended  to  imply  that 
resources  up  to  or  even  near  these  limits  are  available  to  every  program. 


11.1.  Line  Length 

The  implementation  supports  a  maximum  line  length  of  500  characters  including  the  end  of  line  charac- 


11.2.  Record  and  Array  Sizes 

The  maximum  size  of  a  statically  sized  array  type  is  4,000.000  x  STORAGE  UNITS.  The  maximum 
size  of  a  statically  sized  record  type  is  4,000,000  x  STORAGE JJNITS.  A  record  type  or  array  type 
declaration  that  exceeds  these  limits  will  generate  a  warning  message. 

11.3.  Default  Stack  Size  for  Tasks 

In  the  absence  of  an  explicit  STORAGE J> iZE  length  specification  every  task  except  the  main  program 
is  allocated  a  fixed  size  stack  of  10,240  STORAGE  UNITS.  This  is  the  value  returned  by 
T’STORAGESIZE  for  a  task  type  T. 

11.4.  Default  Collection  Size 

In  the  absence  of  an  explicit  STORAG E^SIZE  length  attribute  the  default  collection  size  for  an  access 
type  is  100,000  STORAGE  JJNITS .  This  is  the  value  returned  by  T’STORAGE_SIZE  for  an  «xess 


PACKAGE  STANDARD 


package  STANDARD 

type  INTEGER  is  range  -21474_83648  ...  21474_83647 

type  FLOAT  is  digits  15  range  -1 . 7 97 69 3 134E+308 
1 . 797693134E+308 

type  DURATION  is  delta  IE-03  range  -2147  483 . 648 
2_147_483 . 647 

—  Optionally  supported  numeric  types 

type  SHORT_INTEGER  is  range  -32768  ..  32767 

type  SHORT_FLOAT  is  digits  6  range  -3.40282E+38  ..  3.40282E+38 

—  Any  aditional  predifined  types 
type  TINYINTEGER  is  range  -128  . . 
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APPENDIX  C 


TEST  PARAMETERS 

Certain  tests  in  the  ACVC  make  use  of  implementation-dependent 
values,  such  as  the  maximum  length  of  an  input  line  and  invalid 
file  names.  A  test  that  makes  use  of  such  values  is  identified 
by  the  extension  .TST  in  its  file  name.  Actual  values  to  be 
substituted  are  represented  by  names  that  begin  with  a  dollar 
sign.  A  value  must  be  substituted  for  each  of  these  names 
before  the  test  is  run.  The  values  used  for  this  validation  are 
given  below. 


N  amea  nd_Me  a  n i ng 


Value 


$BIG_ID1 

Identifier  the  size  of  the 
maximum  input  line  length  with 
varying  last  character. 

$BIG_ID2 

Identifier  the  size  of  the 
maximum  input  line  length  with 
varying  last  character. 

$BIG_ID3 

Identifier  the  size  of  the 
maximum  input  line  length  with 
varying  middle  character. 

$BIG_ID4 

Identifier  the  size  of  the 
maximum  input  line  length  with 
varying  middle  character. 

$BIG_INT_LIT 

An  integer  literal  of  value  298 
with  enough  leading  zeroes  so 
that  it  is  the  size  of  the 
maximum  line  length. 


1. . 498=> ' A' , 499=> 1 1 ' 


1. . 498=> '  A '  , 499=> ' 2 ' 


1. .  249=> 1 A' , 250=> ' 3 ' 

251. .  499=> ' A ' 


1. . 249=>'A' , 250=> ' 4 ' 

251. .  499=> 1 A  * 


1. .  496=> ' 0 1 , 

497. .  499=> 1 298 ' 


$BIG_REAL_LIT  1..494=>'0', 

A  universal  real  literal  of  495 . . 499=> ' 690 . 0 ' 
value  690.0  with  enough  leading 
zeroes  to  be  the  size  of  the 
maximum  line  length. 
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TEST  PARAMETERS 


Name_and_Meaning 


Value 


$BIG_STRING1 

A  string  literal  which  when 
catenated  with  BIG_STRING2 
yields  the  image  of  BIG_ID1. 

$BIG_STRING2 

A  string  literal  which  when 
catenated  to  the  end  of 
BIG_STRING1  yields  the  image  of 
BIGID1 . 

$ BLANKS 

A  sequence  of  blanks  twenty 
characters  less  than  the  size 
of  the  maximum  line  length. 


$COUNT_LAST 

A  universal  integer 
literal  whose  value  is 
TEXT  IO. COUNT 'LAST. 


$FIELD_LAST 

A  universal  integer 
literal  whose  value  is 
TEXT  10. FIELD' LAST. 


$  F I LE_NAME_WITH_BAD_CHARS 

An  external  file  name  that 
either  contains  invalid 
characters  or  is  too  long. 


$FILE_NAME_WITH_WILD_CARD_CHAR 

An  external  file  name  that 
either  contains  a  wild  card 
character  or  is  too  long. 


$  GRE ATER_THAN_DURAT ION 

A  universal  real  literal  that 
1 ies  between  DURATION ' BASE ' LAST 
and  DURATION ' LAST  or  any  value 
in  the  range  of  DURATION. 

$GREATER_THAN_DURATION_BASE_LAST 

A  universal  real  literal  that  is 
greater  than  DURATION ' BASE ' LAST. 


"1.  .249=>'A"' 


"1. . 249=> 'A' , 2  50=> ' 1 '  " 


1 . . 479=> '  ' 


21474  83647 


21474  83647 


/illegal/filename/ 
2{ ]$%2102C. DAT 


/ illegal/ filename/ 
CE2102C* . DAT 


75  000.0 


2  147  484.0 
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TEST  PARAMETERS 


Name_and_Meaning _  Value _ 

$ I LLEGAL_EXTERNAL_F I LE_N AME 1  /no/ such/ d i r e  c t o  r y/ 

An  external  file  name  which  ILLEGAL_EXTERNAL_FILE_NAME1 
contains  invalid  characters. 

$ I LLEGAL_EXTERNAL_FI LE_NAME  2  /no/ such/directory/ 

An  external  file  name  which  ILLEGAL_EXTERNAL_FILE_NAME2 
is  too  long. 

$INTEGER_FIRST  -2147483648 

A  universal  integer  literal 

whose  value  is  INTEGER' FIRST. 

$INTEGER_LAST  2147483647 

A  universal  integer  literal 

whose  value  is  INTEGER' LAST. 

$INTEGER_LAST_PLUS_1  2147483648 

A  universal  integer  literal 

whose  value  is  INTEGER 'LAST  +  1. 

$  LE  S  S  _THAN_DURAT ION  -75_000.0 

A'  universal  real  literal  that 
lies  between  DURATION ' BASE ' FIRST 
and  DURATION ' FIRST  or  any  value 
in  the  range  of  DURATION. 

$  LE  S  S_THAN_DURAT I ON_BAS E_FI RST  -2147484 . 0 

A  universal  real  literal  tha*  is 
less  than  DURATION ' BASE ' FIRST. 

$MAX_DIGITS  15 

Maximum  digits  supported  for 
floating-point  types. 

$MAX_IN_LEN  499 

Maximum  input  line  length 
permitted  by  the  implementation. 

$MAX_INT  2147483647 

A  universal  integer  literal 
whose  value  is  SYSTEM. MAX_INT. 

$MAX_INT_PLUS_1  2147483648 

A  universal  integer  literal 
whose  value  is  SYSTEM. MAX  INT+1. 
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TEST  PARAMETERS 


N  ame_and_Me  a  n i ng 


Value 


$MAX_LEN_INT_BASED_LITERAL 

A  universal  integer  based 
literal  whose  value  is  2#11# 
with  enough  leading  zeroes  in 
the  mantissa  to  be  MAX_IN_LEN 
long. 


1. .  2=> ' 2 : '  ,3. . 496=> 'O', 

497. .  499=> 'll: • 


$MAX_LEN_REAL_BASED_LITERAL 

A  universal  real  based  literal 
whose  value  is  16:F.E:  with 
enough  leading  zeroes  in  the 
mantissa  to  be  MAX  IN  LEN  long. 


1. .  3=> ' 16 : ' ,4. . 495=> ' 0 ' , 

496. .  499=> ' F. E: ' 


$MAX_STRING_LITERAL 

A  string  literal  of  size 
MAX_IN_LEN,  including  the  quote 
characters. 


"1.  .  497=>  '  A 


$MIN_INT 

A  universal  integer  literal 
whose  value  is  SYSTEM. MIN  INT. 


-2147483648 


$NAME 

A  name  of  a  predefined  numeric 
type  other  than  FLOAT,  INTEGER, 
SHORTFLOAT ,  SHORT  INTEGER, 
LONG  FLOAT,  or  LONG  INTEGER. 


TINY  INTEGER 


$NEG_BASED_INT 

A  based  integer  literal  whose 
highest  order  nonzero  bit 
falls  in  the  sign  bit 
position  of  the  representation 


16#FFFFFFFE# 


ter  SYSTEM. MAX  INT. 


1 

I 

« 

t 
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APPENDIX  D 


WITHDRAWN  TESTS 


Some  tests  are  withdrawn  from  the  ACVC  because  they  do  not 
conform  to  the  Ada  Standard.  The  following  27  tests  had  been 
withdrawn  at  the  time  of  validation  testing  for  the  reasons 
indicated.  A  reference  of  the  form  "Al-ddddd"  is  to  an  Ada 
Commentary. 


B28003A:  A  basic  declaration  (line  36)  wrongly  follows  a  later 

declaration. 

E28005C:  This  test  requires  that  'PRAGMA  LIST  (ON);'  not  appear 
in  a  listing  that  has  been  suspended  by  a  previous 
"pragma  LIST  (OFF);";  the  Ada  Standard  is  not  clear  on 
this  point,  and  the  matter  will  be  reviewed  by  the 
ALMP. 


C34004A:  The  expression  in  line  168  wrongly  yields  a  value 

outside  of  the  range  of  the  target  T,  raising 
CONSTRAINTERROR. 

C35502P:  The  equality  operators  in  lines  62  and  69  should  be 

inequality  operators. 

A3  5902C:  Line  17' s  assignment  of  the  nominal  upper  bound  of  a 
fixed  point  type  to  an  object  of  that  type  raises 
CONSTRAINTERROR  for  that  value  lies  outside  of  the 
actual  range  of  the  type. 


C35904A;  The  elaboration  of  the  fixed-point  subtype  on  line  28  j 

wrongly  raises  CONSTRAINT_ERROR,  because  its  upper  i 

bound  exceeds  that  of  the  type.  * 

C35904B;  The  subtype  declaration  that  is  expected  to  raise  ! 

CONSTRAINT_ERROR  when  its  compatibility  is  checked 
against  that  of  various  types  passed  as  actual  generic  J 

parameters,  may  in  fact  raise  NUMERI  C_ERROR  or 
CONSTRAINT_ERROR  for  reasons  not  anticipated  by  the  ] 

test.  I 


C35A03E:  This  test  assumes  that  attribute  'MANTISSA'  returns  0 

when  applied  to  a  fixed-point  type  with  a  null  range, 
but  the  Ada  Standard  doesn't  support  this  assumption. 


C35A03R:  This  test  assumes  that  attribute  'MANTISSA'  returns  0 

when  applied  to  a  fixed-point  type  with  a  null  range, 
but  the  Ada  Standard  doesn't  support  this  assumption. 
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C37213H: 


C37213J : 


C37215C: 

C37215E: 

C37215G: 

C37215H: 

C38102C: 


C41402A: 


C45332A: 


C45614C : 


A74016C: 
C85018B: 
C87B04B : 
CC1311B: 


BC3105A: 


AD1A01A: 


CE2401H : 


CE3208A: 


WITHDRAWN  TESTS 

The  subtype  declaration  of  SCONS  in  line  100  is  wrongly 
expected  to  raise  an  exception  when  elaborated. 

The  aggregate  in  line  451  wrongly  raises 
CONSTRAI NT_ERR0R . 

Various  discriminant  constraints  are  wrongly  expected 
to  be  incompatible  with  type  CONS. 


The  fixed-point  conversion  on  line  3  wrongly  raises 
CONSTRAINT_ERROR . 

1 STORAGE_SIZE 1  is  wrongly  applied  to  an  object  of  an 
access  type. 

The  test  expects  that  either  an  expression  in  line  52 
will  raise  an  exception  or  else  MACHINE_OVERFLOWS  is 
FALSE.  However,  an  implementation  may  evaluate  the 
expression  correctly  using  a  type  with  a  wider  range 
than  the  base  type  of  the  operands,  and 
MACHINEOVERFLOWS  may  still  be  TRUE. 

REPORT_IDENT_INT  has  an  argument  of  the  wrong  type 
(LONG_INTEGER) . 

A  bound  specified  in  a  fixed-point  subtype  declaration 
lies  outside  that  calculated  for  the  base  type,  raising 
CON ^ TRAI NT  ERROR .  Errors  of  this  sort  occur  re  lines 
37,  59,  142  and  143,  16  and  48,  252  and  253  of  the  four 
tests  respectively  (and  possibly  elsewhere) . 

Lines  159.. 168  are  wrongly  expected  to  be  incorrect; 
they  are  correct. 

The  declaration  of  subtype  INT3  raises  CONSTRAINT_ERROR 
for  implementations  that  select  INT’SIZE  to  be  16  or 
greater. 

The  record  aggregates  in  lines  105  and  117  contain  the 
wrong  values. 

This  test  expects  that  an  attempt  to  open  the  default 
output  file  (after  it  was  closed)  with  mode  IN_FILE 
raises  NAME_ERR0R  or  USE_ERR0R;  by  Commentary  AI-00048, 
MODE  ERROR  should  be  raised. 
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